last executing test programs: 5m42.284503386s ago: executing program 3 (id=52): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x134, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xe8, 0x8, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000003c0)={"ed56761b813f86430991aeebdcb6a7327ecb1c643da7527fc5cfd42b5f2a", 0xfffffffc, 0x1, 0x401, 0x9, 0x5, 0x7, 0x9, 0x1, [0x2, 0x2, 0xe1, 0x7ff, 0x2, 0xd2a, 0x5, 0x401, 0x0, 0x6, 0x5, 0x4, 0x5, 0x90c, 0x9, 0x3, 0x7, 0x5, 0x2]}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 5m38.190837625s ago: executing program 3 (id=57): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0) 5m25.546277986s ago: executing program 3 (id=66): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0xf0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$eJzslT+PEkEYxp+ZxQWMn8DGQhKxcNld1NiQQGNlYeIfYmEikYWgixjYQkiM8RPY21n4MUy09UMYtNEGq7t6L/NnlzkC3EHY45J7fwnvPrsz8/LOO8kzIAjiwvLn9+E0Pqj9LQC4ghLy+vs/az6HG/N/Ff6///HgfvPT868/81OnuCxnHJ/+/3MAvjcsROna46tL+vkYPNVPwHFT6yYYHK1fgOOp1gEYnmn9ytADMd9xOr0wcF4OwrYQrgieCL4I1cX6Zh8Z2kZ9zBgfjSevW2EYDDMUJ/Vv1uCoGfWZ5+VAVesa/fPA4WldBcMjre8hn/RGtcTY/9XcPL+1dv82drr/TpadtQFstxxgZ3L2GQsLUiQnuvd6di6QOxdlZCy+1dX5JV/iD+p9szz1FUP2hnl051N/ir8w3DD8SVnJZ3nVVKL+28poPLnV67e6QTd44/vVu+5t173jV6QRqbjG/4rSny7P8y+9kwQ2s/GuFUVDT8X03VdxmeNy6X8c5eu4JN6Fm9oLeQuGZvrH5VOosrWyeIIgiD1yDUx6svTlROjbJB2IY//hnuskCIIgCIIgCIIgCGJ7jgIAAP//nx9gWA==") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x2787bf88466864e, 0x8000) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) 5m23.125428715s ago: executing program 1 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m21.380327179s ago: executing program 1 (id=70): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) writev(r0, &(0x7f0000000640)=[{&(0x7f00000006c0)='.', 0x1}], 0x1) 5m19.15204816s ago: executing program 1 (id=74): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m18.822199994s ago: executing program 3 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000"]) 5m16.76901799s ago: executing program 3 (id=78): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x309000, &(0x7f0000000000)={[{}, {@threads_str={'threads', 0x3d, 'multi'}}, {}, {}, {@threads_str={'threads', 0x3d, 'percpu'}}]}, 0x1, 0x228, &(0x7f0000000300)="$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") pipe2$9p(&(0x7f00000001c0), 0x0) close(0x3) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 5m16.485030446s ago: executing program 1 (id=80): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 5m15.335926558s ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffa9) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 5m15.030927647s ago: executing program 1 (id=85): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0xf0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x2787bf88466864e, 0x8000) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) 5m10.733136536s ago: executing program 1 (id=87): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), 0x0}, 0x20) 5m0.114199857s ago: executing program 0 (id=104): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) 4m59.94041615s ago: executing program 32 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffa9) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 4m59.230915924s ago: executing program 0 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103241, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000008010800000000000000000a00000805000300060000000900010073797a3100000000060002406558000006000240891700"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r4, 0xf6a5d000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, 0x0, 0x4000014) fcntl$setlease(r1, 0x400, 0x0) 4m58.519831554s ago: executing program 0 (id=109): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 4m57.964382405s ago: executing program 0 (id=110): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f0000", @ANYRES8=0x0, @ANYRESDEC], 0xa0}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) symlink(0x0, &(0x7f0000000340)='./file1\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') 4m56.919510052s ago: executing program 0 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x500082c) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x1) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4m53.672966855s ago: executing program 33 (id=87): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), 0x0}, 0x20) 4m51.701720759s ago: executing program 0 (id=115): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000"], 0x74}}, 0x0) 4m36.324118731s ago: executing program 34 (id=115): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000"], 0x74}}, 0x0) 1m21.394810238s ago: executing program 2 (id=271): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') 1m18.970314431s ago: executing program 2 (id=273): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560059ec0000000066ba2100b066eeb9e00a00000f"], 0x56}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m15.855102533s ago: executing program 2 (id=275): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(0x0, 0x0, 0x101a02) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, 0x0, 0x10b8}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 1m13.339639964s ago: executing program 2 (id=279): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m7.323969344s ago: executing program 2 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0x3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2c}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m5.155514577s ago: executing program 2 (id=287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000000a1ffffff0000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x4000044) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003e236bb40f00a57d30000010203010902"], &(0x7f0000000040)={0x0, 0x0, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="040f"]}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x0, 0x0, 0x884], [0x1000000], [0xfb]], '\x00', [{0x8001}, {0x0, 0x100}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 49.082110209s ago: executing program 35 (id=287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000000a1ffffff0000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x4000044) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003e236bb40f00a57d30000010203010902"], &(0x7f0000000040)={0x0, 0x0, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="040f"]}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef9, 0x0, 0x0, 0x884], [0x1000000], [0xfb]], '\x00', [{0x8001}, {0x0, 0x100}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13.287866193s ago: executing program 4 (id=333): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6b2, &(0x7f0000000cc0)="$eJzs3c1vHHf9B/D3rDd2Nu0vvyRN2oAi1WokQEQkTqy0mAsBIZRDVVXlwNlKnMaKkxbHRW6FiMPjtYf+AeXgC+KExIlLpMKBC731hnxEQuJSDoQLi2Z21t71rjfrNrEdeL2i2e/TzHc+85mZfbKiDfA/6+q5NB+kyNVzr66W7Y312aWN9dnbnfprzSRTSdaSstpIUvyz3W5/lFxJis1pim3lgA8W59745NONv3ZazXqp1m+M2m6ber21bd1r3b7pJBN1+Tn0zXftc89XbEZ+JcnZuoR9dyhJu88P/vTs5kiP1rCtD+9JjMCTVXReNwccS47UN3r5PqD7ytvY2+jGM9ENcgzb30EAAADA06b6DNwc6O7r+f+HeZjV4ugehgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPtbVksv75/KJeGt36dIru7/9P1n2p6wfLi7tb/cGTigMAAAAAAAAA9tCLD/MwqznabbeL6m/+L1WNk9XjM3knd7OQ5ZzPauazkpUs52KSYz0TTa7Or6xMdVujtrw0bMvlS48ItDt16zEcNAAAAAAAAAD89/lJrm79/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6CIpnoFCnu93QfS6OZ5HCSybJjLfm4W3+aPdjvAAAAAGAPTCUPs5qj3Xa7yMkkz1ffARzOO7mTlSxmJUtZyPXqe4HOp/7Gxvrs0sb67O1yGZz3W3/fVRjVjOl89zB8z6erNVq5kcWq53yu5a0s5Xoa1Zal03U83Vm3xXW/jKn4Zu2V8SK7Xpflkb9flwPu7epgd7LLL1OOVRk51MnIRDJTx1Zm43j3zAw/Q7s8O317ykIuprEZ7MmN9Wtnks09TfYfTH/Ot6ZsjNrfkbosj+cXO+V8X3Qy8e92x0Iu9Vx9z4/OefLl3/3m+zN1/eAc0ngm6rJdPbYGr4nZnky8ME4mbi7duXXzxt1zT1smBsxUmTi12b6a7+Z7OZfpvJ7lLOaHmc9KFjKd71S1+frkFz23/A6ZutLXev1RkUzWV2jnZO0uppeqbY9mMa/lrVzPQl6u/l3KxbySy7mcuZ4zfGr0Ga7u+sbgXV9p/9/Q4M9+pa60kvyyLg+GMq/He/K6ddXPVPk+3tdTZ6lo5sQYWRry3DhK84t1pdzHTx/1RLqntmfiYs/18tzoTPyqelq5u3Tn1vLN+bfH292J9+tKeR/9PJk+OE8k5fVyojxZVWuq7+oox57bHOvPVzl2cnOsMTB2Kr9Ps9ndy2LWdrxTJ+v3cIMzXarGXhg6NluNne4ZG/Z+C4AD78hXj0y2/tb6c+vD1s9aN1uvHv721Nenzkzm0B8OfaM5M/Glxpnit/kwP976/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx2d99979b80tLC8rZKu92+9/HwoTEr3d+r+Yybb690fxVqjJUz/ZdnylWHDE2kfW+HoSdV+cKzyV7ta08rzd2c3H+12+26p9hhnV//cXuiprJPqat/5699IPI8onL48d1fA5V9e0oC9siFldtvX7j77ntfW7w9/+bCmwt35i5fnpuZu/zy7IUbi0sLM53H/Y4SeBK2XvT3OxIAAAAAAAAAAABgXI/5/wysDRva72MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnm5Xz6X5IEUuzpyfKdsb67NL5dKtb63ZTNJIUvwoKT5KrqSz5FjPdMVO+/lgce6NTz7d+Ee7o56vWr8xarvxrNVLppNMdMr7j2u+a3U5UjHqEIrNIywTdrabONhv/wkAAP//tNELUw==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143142, 0x196) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 12.923929836s ago: executing program 7 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) shutdown(r0, 0x1) 12.175770384s ago: executing program 7 (id=335): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)='++\x00') ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_create_resource$binfmt(0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0xfffffffffffffd58) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020090290780000001ce00000000000907800fa00d417d40547ef8a3825a74fb140"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x10000085}, 0x3c) r5 = socket(0x11, 0x800, 0x3b) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd0, &(0x7f0000000240), 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x80, 0x0, 0x0) 12.07641705s ago: executing program 4 (id=336): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000080)={[{@noload}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@grpid}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 9.236939803s ago: executing program 4 (id=337): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.983733879s ago: executing program 4 (id=338): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 5.028974786s ago: executing program 7 (id=339): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0x0) 4.586282105s ago: executing program 4 (id=340): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.903822046s ago: executing program 7 (id=341): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000ff0700"], 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabfee"], 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.668235442s ago: executing program 7 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) shutdown(r0, 0x1) 609.462138ms ago: executing program 7 (id=343): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6b2, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143142, 0x196) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 4 (id=344): userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): ork is pending, handler #42!!! [ 294.691042][ T6017] erofs (device loop1): mounted with root inode @ nid 36. [ 294.774015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 294.784633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 295.143295][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.151826][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.460928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.504663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 295.638582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 295.702648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.713334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 295.778124][ T5814] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[9000] [ 295.792596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 295.803977][ T6022] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[9000] [ 295.815223][ T6022] erofs (device loop1): read error -117 @ 0 of nid 89 [ 295.911166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 296.683080][ T3626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.692657][ T3626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.429907][ T6020] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 297.839499][ T30] audit: type=1800 audit(1750059878.102:2): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 302.227979][ T6033] loop4: detected capacity change from 0 to 1024 [ 302.519176][ T6038] loop3: detected capacity change from 0 to 64 [ 302.640762][ T1146] hfsplus: b-tree write err: -5, ino 4 [ 304.654717][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 308.332669][ T6058] usb usb1: usbfs: process 6058 (syz.0.17) did not claim interface 0 before use [ 309.496479][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 311.135866][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.147535][ T5858] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.159233][ T5858] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.172017][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 311.179247][ T5858] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 311.189679][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.279843][ T5858] usb 2-1: config 0 descriptor?? [ 312.177644][ T5858] kye 0003:0458:5015.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 312.193775][ T5858] kye 0003:0458:5015.0001: unknown main item tag 0x0 [ 312.201876][ T5858] kye 0003:0458:5015.0001: unknown main item tag 0x0 [ 312.208996][ T5858] kye 0003:0458:5015.0001: unknown main item tag 0x0 [ 312.216217][ T5858] kye 0003:0458:5015.0001: unknown main item tag 0x0 [ 312.224498][ T5858] kye 0003:0458:5015.0001: unknown main item tag 0x0 [ 312.231729][ T5858] kye 0003:0458:5015.0001: unknown main item tag 0x0 [ 312.238822][ T5858] kye 0003:0458:5015.0001: unknown main item tag 0x0 [ 312.286465][ T5858] kye 0003:0458:5015.0001: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 312.300810][ T5858] kye 0003:0458:5015.0001: tablet-enabling feature report not found [ 312.309189][ T5858] kye 0003:0458:5015.0001: tablet enabling failed [ 312.393806][ T5858] usb 2-1: USB disconnect, device number 2 [ 319.503230][ T6083] fido_id[6083]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 323.140728][ T6108] loop3: detected capacity change from 0 to 512 [ 323.242648][ T6108] EXT4-fs: Ignoring removed nobh option [ 323.380197][ T6113] Zero length message leads to an empty skb [ 323.546575][ T6108] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 323.568443][ T6108] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 323.581970][ T6108] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.32: Corrupt directory, running e2fsck is recommended [ 323.909314][ T6108] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 323.918881][ T6108] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.32: corrupted in-inode xattr: invalid ea_ino [ 323.940249][ T6108] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.32: couldn't read orphan inode 15 (err -117) [ 324.004392][ T6108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.680049][ T6108] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 324.702447][ T6108] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 324.713239][ T6108] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.32: Corrupt directory, running e2fsck is recommended [ 324.861515][ T6108] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.32: path /6/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 325.415303][ T6108] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.32: path /6/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 325.470327][ T6115] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 328.233481][ T5802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.138086][ T6142] loop1: detected capacity change from 0 to 256 [ 330.149383][ T6142] exfat: Deprecated parameter 'utf8' [ 330.155409][ T6142] exfat: Deprecated parameter 'utf8' [ 331.043024][ T6142] exFAT-fs (loop1): bogus sector size bits : 0 [ 331.049802][ T6142] exFAT-fs (loop1): failed to read boot sector [ 331.056269][ T6142] exFAT-fs (loop1): failed to recognize exfat type [ 331.101864][ T6142] loop1: detected capacity change from 0 to 128 [ 333.808782][ T6142] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 333.809125][ T6142] EXT4-fs: failed to create workqueue [ 333.825439][ T6142] EXT4-fs (loop1): mount failed [ 334.573802][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.42'. [ 337.710060][ T6149] netlink: 165 bytes leftover after parsing attributes in process `syz.1.43'. [ 339.053224][ T6162] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 339.089881][ T6162] team0: Port device dummy0 added [ 339.366998][ T6166] loop4: detected capacity change from 0 to 16 [ 339.496609][ T6166] erofs (device loop4): mounted with root inode @ nid 36. [ 342.866348][ T6176] loop3: detected capacity change from 0 to 128 [ 343.061282][ T6176] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 344.072984][ T6182] [syz.3.52/6182] FS: loop3 File: /blkio.bfq.io_service_bytes would truncate fibmap result [ 352.836811][ T6203] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 354.862724][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.869807][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.905204][ T6216] loop1: detected capacity change from 0 to 8 [ 359.460998][ T6221] loop4: detected capacity change from 0 to 2048 [ 360.454123][ T5999] loop4: p1 < > p3 [ 360.476423][ T6231] loop3: detected capacity change from 0 to 16 [ 360.488729][ T6231] erofs (device loop3): mounted with root inode @ nid 36. [ 360.526711][ T5999] loop4: p3 size 134217728 extends beyond EOD, truncated [ 361.923260][ T6221] loop4: p1 < > p3 [ 362.069323][ T6221] loop4: p3 size 134217728 extends beyond EOD, truncated [ 362.198106][ T6235] loop2: detected capacity change from 0 to 128 [ 362.396227][ T6235] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 363.491447][ T6235] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 363.555862][ T5983] udevd[5983]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 363.564832][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 364.640755][ T6019] udevd[6019]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 364.668029][ T5983] udevd[5983]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 366.337598][ T6260] capability: warning: `syz.2.71' uses 32-bit capabilities (legacy support in use) [ 368.502340][ T6273] loop3: detected capacity change from 0 to 8 [ 368.813924][ T6275] bond_slave_0: entered promiscuous mode [ 368.820245][ T6275] bond_slave_1: entered promiscuous mode [ 368.828645][ T6275] macsec1: entered allmulticast mode [ 368.834467][ T6275] bond0: entered allmulticast mode [ 368.840063][ T6275] bond_slave_0: entered allmulticast mode [ 368.845986][ T6275] bond_slave_1: entered allmulticast mode [ 368.965870][ T6275] bond0: left allmulticast mode [ 368.971452][ T6275] bond_slave_0: left allmulticast mode [ 368.977252][ T6275] bond_slave_1: left allmulticast mode [ 368.983412][ T6275] bond_slave_0: left promiscuous mode [ 368.988987][ T6275] bond_slave_1: left promiscuous mode [ 369.290264][ T6279] loop4: detected capacity change from 0 to 128 [ 369.421154][ T6279] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 369.778223][ T6281] netlink: 128 bytes leftover after parsing attributes in process `syz.2.81'. [ 371.282591][ T6292] loop1: detected capacity change from 0 to 16 [ 371.321861][ T6287] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 371.386105][ T6292] erofs (device loop1): mounted with root inode @ nid 36. [ 374.712798][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 374.955323][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 375.093460][ T42] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 375.103354][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.111923][ T42] usb 5-1: Product: syz [ 375.116406][ T42] usb 5-1: Manufacturer: syz [ 375.121386][ T42] usb 5-1: SerialNumber: syz [ 375.183498][ T42] usb 5-1: config 0 descriptor?? [ 375.334064][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 375.358500][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 376.259356][ T6319] loop2: detected capacity change from 0 to 8 [ 378.194636][ T42] gspca_sonixj: i2c_w8 err -71 [ 378.248121][ T42] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 378.280179][ T42] usb 5-1: USB disconnect, device number 2 [ 379.481117][ T6333] netlink: 128 bytes leftover after parsing attributes in process `syz.4.98'. [ 379.523524][ T6334] loop2: detected capacity change from 0 to 128 [ 379.631794][ T6334] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 380.672578][ T6337] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 384.981603][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 385.979089][ T6358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.107'. [ 386.234130][ T6360] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 386.630945][ T6357] loop4: detected capacity change from 0 to 4096 [ 386.733546][ T6357] ======================================================= [ 386.733546][ T6357] WARNING: The mand mount option has been deprecated and [ 386.733546][ T6357] and is ignored by this kernel. Remove the mand [ 386.733546][ T6357] option from the mount to silence this warning. [ 386.733546][ T6357] ======================================================= [ 386.777931][ T6357] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 386.973346][ T6357] ntfs3(loop4): ino=0, mi_enum_attr [ 386.979294][ T6357] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 387.307164][ T6365] netlink: 128 bytes leftover after parsing attributes in process `syz.0.110'. [ 387.377771][ T6357] ntfs3(loop4): volume is dirty and "force" flag is not set! [ 387.395954][ T6368] loop2: detected capacity change from 0 to 128 [ 387.611102][ T6368] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 388.416789][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.634415][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.682490][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.753089][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.781401][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.520311][ T5816] Bluetooth: hci5: command tx timeout [ 392.750065][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 392.756468][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 392.764510][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 392.771071][ T5095] Bluetooth: hci1: command 0x0406 tx timeout [ 392.777368][ T5095] Bluetooth: hci4: command 0x0406 tx timeout [ 392.968762][ T6373] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 393.553303][ T5803] Bluetooth: hci5: command tx timeout [ 394.871309][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 394.880730][ T6389] netlink: 'syz.0.115': attribute type 5 has an invalid length. [ 394.888624][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 394.917055][ T6389] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 394.926320][ T6389] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 394.937884][ T6389] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 394.947937][ T6389] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 394.957282][ T6389] geneve2: entered promiscuous mode [ 394.962905][ T6389] geneve2: entered allmulticast mode [ 395.010551][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 395.251919][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.117'. [ 395.649145][ T5803] Bluetooth: hci5: command tx timeout [ 395.832747][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 395.853623][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 395.883550][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 395.898176][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 395.911183][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 396.856666][ T5867] IPVS: starting estimator thread 0... [ 396.960846][ T6408] IPVS: using max 192 ests per chain, 9600 per kthread [ 397.734733][ T49] Bluetooth: hci5: command tx timeout [ 398.033995][ T49] Bluetooth: hci6: command tx timeout [ 398.805754][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.813856][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.832896][ T6369] bridge_slave_0: entered allmulticast mode [ 398.843290][ T6369] bridge_slave_0: entered promiscuous mode [ 398.935576][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.943901][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.952144][ T6369] bridge_slave_1: entered allmulticast mode [ 398.961732][ T6369] bridge_slave_1: entered promiscuous mode [ 399.105903][ T6417] netlink: 128 bytes leftover after parsing attributes in process `syz.2.121'. [ 399.244253][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.283757][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.890163][ T6369] team0: Port device team_slave_0 added [ 400.021482][ T6369] team0: Port device team_slave_1 added [ 400.032129][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 400.110094][ T49] Bluetooth: hci6: command tx timeout [ 402.119046][ T6429] block device autoloading is deprecated and will be removed. [ 402.191128][ T49] Bluetooth: hci6: command tx timeout [ 403.006716][ T4279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.567421][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.574858][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.601713][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.781596][ T4279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.837524][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.853178][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.882821][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.197841][ T4279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.280040][ T49] Bluetooth: hci6: command tx timeout [ 404.537730][ T4279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.099234][ T6369] hsr_slave_0: entered promiscuous mode [ 405.108861][ T6369] hsr_slave_1: entered promiscuous mode [ 405.117195][ T6369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.125065][ T6369] Cannot create hsr debugfs directory [ 405.381534][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.126'. [ 405.643104][ T4279] bridge_slave_1: left allmulticast mode [ 405.649121][ T4279] bridge_slave_1: left promiscuous mode [ 405.656079][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.796351][ T4279] bridge_slave_0: left allmulticast mode [ 405.802703][ T4279] bridge_slave_0: left promiscuous mode [ 405.809730][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.791493][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.875166][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.922564][ T4279] bond0 (unregistering): Released all slaves [ 407.772037][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.779882][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.787699][ T6398] bridge_slave_0: entered allmulticast mode [ 407.800089][ T6398] bridge_slave_0: entered promiscuous mode [ 407.945830][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.955208][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.964262][ T6398] bridge_slave_1: entered allmulticast mode [ 407.975825][ T6398] bridge_slave_1: entered promiscuous mode [ 408.221044][ T4279] hsr_slave_0: left promiscuous mode [ 408.272794][ T4279] hsr_slave_1: left promiscuous mode [ 408.284007][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.292080][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.428544][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.437620][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.664931][ T4279] veth1_macvtap: left promiscuous mode [ 408.671326][ T4279] veth0_macvtap: left promiscuous mode [ 408.677355][ T4279] veth1_vlan: left promiscuous mode [ 408.683296][ T4279] veth0_vlan: left promiscuous mode [ 412.286327][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 412.507568][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 413.594064][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.661498][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.692386][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.707652][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.718792][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.806886][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.854091][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.301282][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 415.194484][ T6398] team0: Port device team_slave_0 added [ 415.265706][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 416.170083][ T5803] Bluetooth: hci1: command tx timeout [ 416.183573][ T6398] team0: Port device team_slave_1 added [ 416.186330][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.196655][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.773047][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.780713][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.807584][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.906238][ T4279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.080895][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.088571][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.115551][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.136930][ T6369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.209931][ T49] Bluetooth: hci1: command tx timeout [ 418.219351][ T4279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.296223][ T6369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.456953][ T6369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.505358][ T4279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.882084][ T6369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.149053][ T4279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.460881][ T6398] hsr_slave_0: entered promiscuous mode [ 419.474649][ T6398] hsr_slave_1: entered promiscuous mode [ 419.483106][ T6398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.491040][ T6398] Cannot create hsr debugfs directory [ 420.303227][ T49] Bluetooth: hci1: command tx timeout [ 422.354235][ T49] Bluetooth: hci1: command tx timeout [ 422.895435][ T4279] bridge_slave_1: left allmulticast mode [ 422.901698][ T4279] bridge_slave_1: left promiscuous mode [ 422.908496][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.051384][ T4279] bridge_slave_0: left allmulticast mode [ 423.057545][ T4279] bridge_slave_0: left promiscuous mode [ 423.064926][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.883537][ T6507] loop2: detected capacity change from 0 to 40427 [ 423.937086][ T6507] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 423.944577][ T6507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 423.956061][ T6507] F2FS-fs (loop2): build fault injection rate: 17008 [ 423.964027][ T6507] F2FS-fs (loop2): build fault injection type: 0x1f8 [ 424.152371][ T6507] F2FS-fs (loop2): invalid crc value [ 425.113996][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.142216][ T6507] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 425.150771][ T6507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 425.213596][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.360958][ T4279] bond0 (unregistering): Released all slaves [ 426.568137][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 429.003305][ T5799] syz-executor: attempt to access beyond end of device [ 429.003305][ T5799] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 429.018291][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(undef) [ 429.018454][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.018582][ T5799] Call Trace: [ 429.018657][ T5799] [ 429.018721][ T5799] __dump_stack+0x26/0x30 [ 429.019064][ T5799] dump_stack_lvl+0x1df/0x270 [ 429.019248][ T5799] dump_stack+0x1e/0x25 [ 429.019414][ T5799] f2fs_handle_critical_error+0xa6f/0xc20 [ 429.019740][ T5799] f2fs_stop_checkpoint+0x65/0x80 [ 429.019966][ T5799] f2fs_write_end_io+0xb4b/0x1920 [ 429.020110][ T5799] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.020388][ T5799] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 429.020520][ T5799] bio_endio+0xe27/0xf80 [ 429.020760][ T5799] submit_bio_noacct+0x214/0x2710 [ 429.021117][ T5799] submit_bio+0x5a9/0x5d0 [ 429.021309][ T5799] f2fs_submit_write_bio+0x92/0x250 [ 429.021496][ T5799] __submit_merged_bio+0x16f/0x6a0 [ 429.021672][ T5799] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.021871][ T5799] __submit_merged_write_cond+0x458/0x9a0 [ 429.022108][ T5799] f2fs_write_data_pages+0x4bb2/0x5480 [ 429.022433][ T5799] ? kmsan_get_metadata+0xfb/0x160 [ 429.022613][ T5799] ? kmsan_get_metadata+0xfb/0x160 [ 429.022799][ T5799] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.023004][ T5799] ? __pfx_folios_put_refs+0x1/0x10 [ 429.023223][ T5799] ? filter_irq_stacks+0x49/0x190 [ 429.023418][ T5799] ? stack_depot_save_flags+0x35/0x7b0 [ 429.023638][ T5799] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 429.023820][ T5799] ? kmsan_get_metadata+0xfb/0x160 [ 429.024012][ T5799] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.024206][ T5799] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 429.024406][ T5799] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 429.024610][ T5799] do_writepages+0x3f2/0x860 [ 429.024812][ T5799] ? _raw_spin_unlock+0x30/0x50 [ 429.025212][ T5799] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 429.025463][ T5799] filemap_fdatawrite+0x207/0x260 [ 429.025757][ T5799] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 429.025936][ T5799] f2fs_write_checkpoint+0xfe2/0x2b00 [ 429.026246][ T5799] kill_f2fs_super+0x2ff/0x970 [ 429.026413][ T5799] ? __pfx_kill_f2fs_super+0x10/0x10 [ 429.026598][ T5799] deactivate_locked_super+0xc8/0x3c0 [ 429.026837][ T5799] deactivate_super+0x12f/0x140 [ 429.027008][ T5799] cleanup_mnt+0x6fb/0x780 [ 429.027172][ T5799] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 429.027364][ T5799] ? __pfx___cleanup_mnt+0x10/0x10 [ 429.027505][ T5799] __cleanup_mnt+0x22/0x30 [ 429.027643][ T5799] task_work_run+0x209/0x2b0 [ 429.027853][ T5799] exit_to_user_mode_loop+0x2a6/0x330 [ 429.028058][ T5799] do_syscall_64+0x1e3/0x210 [ 429.028230][ T5799] ? irqentry_exit+0x16/0x60 [ 429.028356][ T5799] ? clear_bhb_loop+0x40/0x90 [ 429.028546][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.028722][ T5799] RIP: 0033:0x7f544518fc57 [ 429.028861][ T5799] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 429.028983][ T5799] RSP: 002b:00007fff33bd98e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 429.029122][ T5799] RAX: 0000000000000000 RBX: 00007f5445210925 RCX: 00007f544518fc57 [ 429.029210][ T5799] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff33bd99a0 [ 429.029293][ T5799] RBP: 00007fff33bd99a0 R08: 0000000000000000 R09: 0000000000000000 [ 429.029376][ T5799] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff33bdaa30 [ 429.029473][ T5799] R13: 00007f5445210925 R14: 0000000000067ebe R15: 00007fff33bdaa70 [ 429.029589][ T5799] [ 429.393770][ T5799] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 429.919626][ T4279] hsr_slave_0: left promiscuous mode [ 429.928615][ T4279] hsr_slave_1: left promiscuous mode [ 429.937807][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.945943][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.011698][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.020350][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.251991][ T4279] veth1_macvtap: left promiscuous mode [ 430.258041][ T4279] veth0_macvtap: left promiscuous mode [ 430.264340][ T4279] veth1_vlan: left promiscuous mode [ 430.270229][ T4279] veth0_vlan: left promiscuous mode [ 431.928229][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 432.067355][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 433.400904][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.620859][ T6535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.145'. [ 433.720072][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.797210][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.805024][ T1879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.907857][ T4279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.918913][ T4279] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 434.012496][ T6398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 434.096021][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.103856][ T1879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.215929][ T4279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.230372][ T4279] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 434.431923][ T6543] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 434.439957][ T6543] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 434.506915][ T6398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.786816][ T4279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.798513][ T4279] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 434.894713][ T6398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.110573][ T4279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.122079][ T4279] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 435.160561][ T6398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 435.210240][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.217952][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.226413][ T6468] bridge_slave_0: entered allmulticast mode [ 435.287177][ T6468] bridge_slave_0: entered promiscuous mode [ 435.902298][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.910652][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.918740][ T6468] bridge_slave_1: entered allmulticast mode [ 435.978515][ T6468] bridge_slave_1: entered promiscuous mode [ 436.036822][ T4279] bridge_slave_1: left allmulticast mode [ 436.043229][ T4279] bridge_slave_1: left promiscuous mode [ 436.051031][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.122062][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.970404][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.005054][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.056556][ T4279] bond0 (unregistering): Released all slaves [ 437.603039][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.759902][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.392427][ T4279] hsr_slave_0: left promiscuous mode [ 438.907017][ T4279] hsr_slave_1: left promiscuous mode [ 438.915846][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.925029][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.022124][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.153'. [ 439.054529][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.063685][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.183104][ T4279] veth1_macvtap: left promiscuous mode [ 439.189226][ T4279] veth0_macvtap: left promiscuous mode [ 439.197113][ T4279] veth1_vlan: left promiscuous mode [ 439.203159][ T4279] veth0_vlan: left promiscuous mode [ 439.993065][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 440.021932][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 440.216855][ T4279] team0 (unregistering): Port device dummy0 removed [ 440.327524][ T6468] team0: Port device team_slave_0 added [ 440.549233][ T6468] team0: Port device team_slave_1 added [ 441.036801][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.045065][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.072400][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.337838][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.346215][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.373840][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.465915][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.898482][ T6585] loop4: detected capacity change from 0 to 16 [ 441.982790][ T6585] erofs (device loop4): mounted with root inode @ nid 36. [ 442.211235][ T6468] hsr_slave_0: entered promiscuous mode [ 442.223087][ T6468] hsr_slave_1: entered promiscuous mode [ 442.250557][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.300751][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.376810][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.384860][ T4054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.615447][ T6587] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 442.680601][ T6587] erofs (device loop4): failed to decompress -23 in[64, 4032] out[1851] [ 442.689315][ T6587] erofs (device loop4): read error -117 @ 43 of nid 36 [ 442.885214][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.893064][ T4054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.957820][ T6468] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 445.093557][ T6468] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 445.242158][ T6468] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 445.347916][ T6468] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 446.695483][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.158184][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.494418][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.623141][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.630829][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.860902][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.868559][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.049201][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.083242][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.104697][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.132028][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.172372][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.270677][ T5803] Bluetooth: hci0: command tx timeout [ 452.363511][ T5803] Bluetooth: hci0: command tx timeout [ 452.941887][ T6624] chnl_net:caif_netlink_parms(): no params data found [ 454.430282][ T5803] Bluetooth: hci0: command tx timeout [ 454.617822][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.520980][ T49] Bluetooth: hci0: command tx timeout [ 456.581454][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.600964][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.611013][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.623794][ T4279] bridge_slave_1: left allmulticast mode [ 456.631754][ T4279] bridge_slave_1: left promiscuous mode [ 456.640373][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.721227][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.738239][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.806597][ T4279] bridge_slave_0: left allmulticast mode [ 456.814383][ T4279] bridge_slave_0: left promiscuous mode [ 456.821869][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.506912][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.582884][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.620229][ T4279] bond0 (unregistering): Released all slaves [ 457.882599][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.891556][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.904660][ T6624] bridge_slave_0: entered allmulticast mode [ 457.922530][ T6624] bridge_slave_0: entered promiscuous mode [ 458.262155][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.270623][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.279029][ T6624] bridge_slave_1: entered allmulticast mode [ 458.292112][ T6624] bridge_slave_1: entered promiscuous mode [ 458.414879][ T4279] hsr_slave_0: left promiscuous mode [ 458.470159][ T4279] hsr_slave_1: left promiscuous mode [ 458.479275][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.583132][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.834856][ T49] Bluetooth: hci3: command tx timeout [ 460.019368][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 460.140685][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 460.924168][ T49] Bluetooth: hci3: command tx timeout [ 461.331509][ T6624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.651991][ T6624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.615783][ T6624] team0: Port device team_slave_0 added [ 462.684718][ T6624] team0: Port device team_slave_1 added [ 462.774818][ T6468] veth0_vlan: entered promiscuous mode [ 462.996823][ T49] Bluetooth: hci3: command tx timeout [ 463.516268][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.524030][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.557772][ T6624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.605598][ T6468] veth1_vlan: entered promiscuous mode [ 463.758054][ T6673] chnl_net:caif_netlink_parms(): no params data found [ 463.827072][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.835215][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.866449][ T6624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.539154][ T6468] veth0_macvtap: entered promiscuous mode [ 464.878930][ T6624] hsr_slave_0: entered promiscuous mode [ 464.891047][ T6624] hsr_slave_1: entered promiscuous mode [ 464.901565][ T6624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.909920][ T6624] Cannot create hsr debugfs directory [ 464.956957][ T6468] veth1_macvtap: entered promiscuous mode [ 465.002920][ T4279] bridge_slave_1: left allmulticast mode [ 465.009114][ T4279] bridge_slave_1: left promiscuous mode [ 465.017131][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.089975][ T49] Bluetooth: hci3: command tx timeout [ 465.123461][ T4279] bridge_slave_0: left allmulticast mode [ 465.131690][ T4279] bridge_slave_0: left promiscuous mode [ 465.139064][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.751472][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.839076][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.864937][ T4279] bond0 (unregistering): Released all slaves [ 466.340118][ T4279] hsr_slave_0: left promiscuous mode [ 466.372748][ T4279] hsr_slave_1: left promiscuous mode [ 466.381957][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.453007][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.250065][ T6720] loop2: detected capacity change from 0 to 512 [ 467.318326][ T6720] EXT4-fs: Ignoring removed nobh option [ 467.551222][ T6720] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 467.564206][ T6720] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 467.574973][ T6720] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.172: Corrupt directory, running e2fsck is recommended [ 467.732567][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 467.775721][ T6720] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 467.784848][ T6720] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.172: corrupted in-inode xattr: invalid ea_ino [ 467.821270][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 467.847144][ T6720] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.172: couldn't read orphan inode 15 (err -117) [ 467.935145][ T6720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.971149][ T6720] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 467.984565][ T6720] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 467.995390][ T6720] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.172: Corrupt directory, running e2fsck is recommended [ 468.011863][ T6720] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.172: path /46/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 468.083375][ T6720] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 8: comm syz.2.172: path /46/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 468.408370][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.362831][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.370933][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.378999][ T6673] bridge_slave_0: entered allmulticast mode [ 469.395403][ T6673] bridge_slave_0: entered promiscuous mode [ 469.815175][ T6673] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.825447][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.833976][ T6673] bridge_slave_1: entered allmulticast mode [ 469.844810][ T6673] bridge_slave_1: entered promiscuous mode [ 470.367692][ T6673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.461229][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 470.486561][ T6673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.492074][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 470.532320][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 470.570487][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 470.599153][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 471.351553][ T6673] team0: Port device team_slave_0 added [ 471.592332][ T6673] team0: Port device team_slave_1 added [ 472.045901][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.054816][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.082312][ T6673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.133479][ T6624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 472.244494][ T6673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.255026][ T6673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.297394][ T6673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.380410][ T6624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 472.481331][ T6624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 472.581491][ T6624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 472.798410][ T49] Bluetooth: hci5: command tx timeout [ 473.381752][ T6673] hsr_slave_0: entered promiscuous mode [ 473.400972][ T6673] hsr_slave_1: entered promiscuous mode [ 473.410882][ T6673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.418791][ T6673] Cannot create hsr debugfs directory [ 473.636008][ T6737] chnl_net:caif_netlink_parms(): no params data found [ 474.847042][ T49] Bluetooth: hci5: command tx timeout [ 475.138009][ T6760] loop4: detected capacity change from 0 to 128 [ 475.257453][ T6760] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 475.270608][ T1879] bridge_slave_1: left allmulticast mode [ 475.277051][ T1879] bridge_slave_1: left promiscuous mode [ 475.284824][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.389323][ T1879] bridge_slave_0: left allmulticast mode [ 475.396013][ T1879] bridge_slave_0: left promiscuous mode [ 475.406049][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.246546][ T6764] [syz.4.178/6764] FS: loop4 File: /blkio.bfq.io_service_bytes would truncate fibmap result [ 476.415612][ T1879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.558571][ T1879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.692616][ T1879] bond0 (unregistering): Released all slaves [ 476.940810][ T49] Bluetooth: hci5: command tx timeout [ 477.428500][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 477.435776][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 478.296681][ T1879] hsr_slave_0: left promiscuous mode [ 478.337762][ T1879] hsr_slave_1: left promiscuous mode [ 478.350751][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.428758][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.530738][ T1879] veth1_macvtap: left promiscuous mode [ 478.538197][ T1879] veth0_macvtap: left promiscuous mode [ 478.545666][ T1879] veth1_vlan: left promiscuous mode [ 478.553239][ T1879] veth0_vlan: left promiscuous mode [ 479.060214][ T49] Bluetooth: hci5: command tx timeout [ 479.715191][ T1879] team0 (unregistering): Port device team_slave_1 removed [ 479.747823][ T1879] team0 (unregistering): Port device team_slave_0 removed [ 480.159728][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.172432][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.183927][ T6737] bridge_slave_0: entered allmulticast mode [ 480.198523][ T6737] bridge_slave_0: entered promiscuous mode [ 480.401696][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.410597][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.418958][ T6737] bridge_slave_1: entered allmulticast mode [ 480.433001][ T6737] bridge_slave_1: entered promiscuous mode [ 481.472517][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.586328][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.023059][ T6737] team0: Port device team_slave_0 added [ 482.048952][ T6737] team0: Port device team_slave_1 added [ 482.399005][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.823984][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.833061][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.861422][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.906055][ T6673] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 483.228327][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.237686][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.281594][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.297864][ T6673] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.491064][ T6673] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.608533][ T6624] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.622038][ T6673] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.074237][ T6737] hsr_slave_0: entered promiscuous mode [ 484.088311][ T6737] hsr_slave_1: entered promiscuous mode [ 484.144658][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.153261][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.236023][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.244377][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.943798][ T6673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.439958][ T6673] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.604743][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.612642][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.814702][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.822884][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.433235][ T6737] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 487.521184][ T6737] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 487.623823][ T6737] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 487.761428][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.774627][ T6737] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 488.813952][ T6810] netlink: 108 bytes leftover after parsing attributes in process `syz.4.186'. [ 490.206784][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.249262][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.463611][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.565270][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.573120][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.770724][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.778880][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.978280][ T6624] veth0_vlan: entered promiscuous mode [ 492.138568][ T6624] veth1_vlan: entered promiscuous mode [ 492.644641][ T6624] veth0_macvtap: entered promiscuous mode [ 492.739012][ T6624] veth1_macvtap: entered promiscuous mode [ 492.795018][ T6836] loop2: detected capacity change from 0 to 128 [ 492.952063][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.001764][ T6836] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 493.100942][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.275672][ T6624] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.285348][ T6624] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.294912][ T6624] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.304517][ T6624] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.768119][ T6842] [syz.2.188/6842] FS: loop2 File: /blkio.bfq.io_service_bytes would truncate fibmap result [ 493.970531][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.395483][ T6673] veth0_vlan: entered promiscuous mode [ 495.619160][ T6673] veth1_vlan: entered promiscuous mode [ 496.249053][ T6673] veth0_macvtap: entered promiscuous mode [ 496.398343][ T6673] veth1_macvtap: entered promiscuous mode [ 496.746408][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.864111][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.967295][ T6673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.977235][ T6673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.988772][ T6673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.000814][ T6673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.060723][ T6737] veth0_vlan: entered promiscuous mode [ 501.322690][ T6882] loop4: detected capacity change from 0 to 512 [ 501.365918][ T6737] veth1_vlan: entered promiscuous mode [ 501.377495][ T6882] ext4: Unknown parameter 'dont_hash' [ 502.219417][ T6737] veth0_macvtap: entered promiscuous mode [ 502.534890][ T6737] veth1_macvtap: entered promiscuous mode [ 503.314426][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.525466][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.847307][ T6737] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.857008][ T6737] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.867145][ T6737] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.876763][ T6737] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.508041][ T6930] loop2: detected capacity change from 0 to 128 [ 509.577091][ T6930] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 509.592211][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.631003][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.642696][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.657435][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.672686][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.090945][ T6938] [syz.2.198/6938] FS: loop2 File: /blkio.bfq.io_service_bytes would truncate fibmap result [ 511.789935][ T5803] Bluetooth: hci1: command tx timeout [ 513.145147][ T6932] chnl_net:caif_netlink_parms(): no params data found [ 513.899305][ T5803] Bluetooth: hci1: command tx timeout [ 515.949979][ T49] Bluetooth: hci1: command tx timeout [ 518.436959][ T49] Bluetooth: hci1: command tx timeout [ 519.613995][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.622954][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.636100][ T6932] bridge_slave_0: entered allmulticast mode [ 519.646299][ T6932] bridge_slave_0: entered promiscuous mode [ 520.037676][ T1146] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.187417][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.195606][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.204292][ T6932] bridge_slave_1: entered allmulticast mode [ 520.214789][ T6932] bridge_slave_1: entered promiscuous mode [ 520.414898][ T1146] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.030315][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.041095][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.041448][ T1146] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.051561][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.073461][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.085886][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.245691][ T1146] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.440514][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.661868][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.440821][ T5803] Bluetooth: hci0: command tx timeout [ 530.186428][ T5803] Bluetooth: hci0: command tx timeout [ 531.793638][ T1146] bridge_slave_1: left allmulticast mode [ 531.802630][ T1146] bridge_slave_1: left promiscuous mode [ 531.809767][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.012927][ T1146] bridge_slave_0: left allmulticast mode [ 532.024015][ T1146] bridge_slave_0: left promiscuous mode [ 532.031930][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.270491][ T5803] Bluetooth: hci0: command tx timeout [ 533.548267][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 533.568946][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 533.587957][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 533.622372][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 533.645880][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 533.702542][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.825862][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.850762][ T1146] bond0 (unregistering): Released all slaves [ 533.947843][ T6932] team0: Port device team_slave_0 added [ 534.191290][ T6932] team0: Port device team_slave_1 added [ 534.374142][ T1146] hsr_slave_0: left promiscuous mode [ 534.383565][ T1146] hsr_slave_1: left promiscuous mode [ 534.405635][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.414063][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.435193][ T49] Bluetooth: hci0: command tx timeout [ 534.473146][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.481808][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.598786][ T1146] veth1_macvtap: left promiscuous mode [ 534.605453][ T1146] veth0_macvtap: left promiscuous mode [ 534.611883][ T1146] veth1_vlan: left promiscuous mode [ 534.617768][ T1146] veth0_vlan: left promiscuous mode [ 535.540957][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 535.669385][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 535.815745][ T49] Bluetooth: hci6: command tx timeout [ 536.615609][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.623194][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.650172][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.920817][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.928329][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.955587][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.353934][ T6932] hsr_slave_0: entered promiscuous mode [ 537.365497][ T6932] hsr_slave_1: entered promiscuous mode [ 537.375943][ T6932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.386538][ T6932] Cannot create hsr debugfs directory [ 537.593477][ T1146] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.880373][ T49] Bluetooth: hci6: command tx timeout [ 537.908845][ T1146] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.154743][ T1146] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.389314][ T1146] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.796764][ T6980] chnl_net:caif_netlink_parms(): no params data found [ 538.864331][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 538.871551][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.822434][ T7003] chnl_net:caif_netlink_parms(): no params data found [ 539.954034][ T49] Bluetooth: hci6: command tx timeout [ 540.055780][ T1146] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.296233][ T1146] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.735952][ T1146] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.945431][ T1146] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.694270][ T7040] loop2: detected capacity change from 0 to 512 [ 541.766481][ T7040] EXT4-fs: Ignoring removed nobh option [ 541.992096][ T7040] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 542.004360][ T7040] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 542.015027][ T7040] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.205: Corrupt directory, running e2fsck is recommended [ 542.054758][ T49] Bluetooth: hci6: command tx timeout [ 542.139875][ T7040] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 542.149021][ T7040] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.205: corrupted in-inode xattr: invalid ea_ino [ 542.166280][ T7040] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.205: couldn't read orphan inode 15 (err -117) [ 542.199001][ T7040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.221460][ T1146] bridge_slave_1: left allmulticast mode [ 542.227779][ T1146] bridge_slave_1: left promiscuous mode [ 542.235482][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.288846][ T7040] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 542.300987][ T7040] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 542.311734][ T7040] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.205: Corrupt directory, running e2fsck is recommended [ 542.352159][ T1146] bridge_slave_0: left allmulticast mode [ 542.358204][ T1146] bridge_slave_0: left promiscuous mode [ 542.365586][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.395475][ T7040] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.205: path /62/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 542.424075][ T1146] bridge_slave_1: left allmulticast mode [ 542.431763][ T1146] bridge_slave_1: left promiscuous mode [ 542.438174][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.476717][ T7040] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 8: comm syz.2.205: path /62/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 542.527811][ T1146] bridge_slave_0: left allmulticast mode [ 542.534427][ T1146] bridge_slave_0: left promiscuous mode [ 542.541503][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.248228][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.317014][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.351688][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.390725][ T1146] bond0 (unregistering): Released all slaves [ 543.681593][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.796341][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.846755][ T1146] bond0 (unregistering): Released all slaves [ 543.942114][ T6932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 544.270598][ T6932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 544.417069][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.428281][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.436573][ T6980] bridge_slave_0: entered allmulticast mode [ 544.446031][ T6980] bridge_slave_0: entered promiscuous mode [ 544.577185][ T6932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 544.616846][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.626055][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.634323][ T7003] bridge_slave_0: entered allmulticast mode [ 544.647661][ T7003] bridge_slave_0: entered promiscuous mode [ 544.675457][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.683655][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.691920][ T6980] bridge_slave_1: entered allmulticast mode [ 544.701644][ T6980] bridge_slave_1: entered promiscuous mode [ 544.724230][ T6932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 544.857197][ T1146] hsr_slave_0: left promiscuous mode [ 544.878110][ T1146] hsr_slave_1: left promiscuous mode [ 544.887801][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.896227][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.994756][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.003200][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.132818][ T1146] hsr_slave_0: left promiscuous mode [ 545.170049][ T1146] hsr_slave_1: left promiscuous mode [ 545.178696][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.187348][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.213327][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.221397][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.279880][ T1146] veth1_macvtap: left promiscuous mode [ 545.285906][ T1146] veth0_macvtap: left promiscuous mode [ 545.294586][ T1146] veth1_vlan: left promiscuous mode [ 545.300313][ T1146] veth0_vlan: left promiscuous mode [ 545.320424][ T1146] veth1_macvtap: left promiscuous mode [ 545.326423][ T1146] veth0_macvtap: left promiscuous mode [ 545.332915][ T1146] veth1_vlan: left promiscuous mode [ 545.338589][ T1146] veth0_vlan: left promiscuous mode [ 546.372061][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 546.484134][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 547.382259][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 547.422212][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 547.689979][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.699775][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.708511][ T7003] bridge_slave_1: entered allmulticast mode [ 547.726524][ T7003] bridge_slave_1: entered promiscuous mode [ 548.338739][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.504190][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.615929][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.717001][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.788350][ T6980] team0: Port device team_slave_0 added [ 548.983164][ T7061] loop2: detected capacity change from 0 to 1024 [ 549.203073][ T7003] team0: Port device team_slave_0 added [ 549.221489][ T6980] team0: Port device team_slave_1 added [ 549.380372][ T7003] team0: Port device team_slave_1 added [ 549.652972][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.660577][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.687478][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.918255][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.926838][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.955551][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.032538][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.040507][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.067366][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.107264][ T7066] tipc: Failed to obtain node identity [ 550.114032][ T7066] tipc: Enabling of bearer rejected, failed to enable media [ 550.272010][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.356485][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.364093][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.395133][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.733974][ T6980] hsr_slave_0: entered promiscuous mode [ 550.743664][ T6980] hsr_slave_1: entered promiscuous mode [ 550.844217][ T6932] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.949690][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 551.081807][ T7069] bridge_slave_0: left allmulticast mode [ 551.087709][ T7069] bridge_slave_0: left promiscuous mode [ 551.094919][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.286795][ T7069] bridge_slave_1: left allmulticast mode [ 551.293008][ T7069] bridge_slave_1: left promiscuous mode [ 551.299934][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.419058][ T7069] bond0: (slave bond_slave_0): Releasing backup interface [ 551.538564][ T7069] bond0: (slave bond_slave_1): Releasing backup interface [ 551.608436][ T7069] team0: Port device team_slave_0 removed [ 551.705244][ T7069] team0: Port device team_slave_1 removed [ 551.717219][ T7069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.725299][ T7069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.867500][ T7069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.875636][ T7069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.037956][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.045934][ T3711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.188428][ T7003] hsr_slave_0: entered promiscuous mode [ 552.199379][ T7003] hsr_slave_1: entered promiscuous mode [ 552.208754][ T7003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.221119][ T7003] Cannot create hsr debugfs directory [ 552.405495][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.413322][ T3711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.225367][ T7081] loop4: detected capacity change from 0 to 512 [ 554.263227][ T7081] EXT4-fs: Ignoring removed nobh option [ 554.362454][ T7081] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 554.380056][ T7081] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 554.393624][ T7081] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.218: Corrupt directory, running e2fsck is recommended [ 554.630598][ T7081] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 554.640362][ T7081] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.218: corrupted in-inode xattr: invalid ea_ino [ 554.747818][ T7081] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.218: couldn't read orphan inode 15 (err -117) [ 554.851389][ T7081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.941658][ T7081] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 554.955022][ T7081] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 554.966527][ T7081] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.218: Corrupt directory, running e2fsck is recommended [ 555.057981][ T7081] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.218: path /79/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 555.398247][ T6980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 555.428902][ T6980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 555.514801][ T6980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 555.560552][ T7003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 555.621789][ T6980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 555.708208][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.727766][ T7003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 555.831202][ T30] audit: type=1326 audit(1750060138.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.854050][ T30] audit: type=1326 audit(1750060138.092:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.872852][ T7003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 555.877067][ T30] audit: type=1326 audit(1750060138.092:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.906058][ T30] audit: type=1326 audit(1750060138.092:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.928757][ T30] audit: type=1326 audit(1750060138.092:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.951699][ T30] audit: type=1326 audit(1750060138.102:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.951952][ T30] audit: type=1326 audit(1750060138.102:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.952190][ T30] audit: type=1326 audit(1750060138.102:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.952411][ T30] audit: type=1326 audit(1750060138.102:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 555.952648][ T30] audit: type=1326 audit(1750060138.102:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f544518e929 code=0x7ffc0000 [ 556.194337][ T7003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 556.330665][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.342191][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.274326][ T6980] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.424466][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.432262][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.459101][ T49] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 560.542190][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.700362][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.708073][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.927011][ T7003] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.094654][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.102446][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.284327][ T6980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 561.481844][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.489748][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.925455][ T7003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.270834][ T7130] loop2: detected capacity change from 0 to 512 [ 563.341476][ T7130] EXT4-fs: Ignoring removed nobh option [ 563.388078][ T6932] veth0_vlan: entered promiscuous mode [ 563.505812][ T7130] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 563.518705][ T7130] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 563.529766][ T7130] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.228: Corrupt directory, running e2fsck is recommended [ 563.623305][ T6932] veth1_vlan: entered promiscuous mode [ 563.705406][ T7130] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 563.715449][ T7130] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.228: corrupted in-inode xattr: invalid ea_ino [ 563.771020][ T7130] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.228: couldn't read orphan inode 15 (err -117) [ 563.862615][ T7130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.028764][ T6932] veth0_macvtap: entered promiscuous mode [ 564.036781][ T7130] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 564.050308][ T7130] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 564.061233][ T7130] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.228: Corrupt directory, running e2fsck is recommended [ 564.139233][ T6932] veth1_macvtap: entered promiscuous mode [ 564.192105][ T7130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.228: path /73/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 564.345098][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.474963][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.642774][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.775867][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.808120][ T6932] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.817672][ T6932] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.827078][ T6932] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.836441][ T6932] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.885986][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.663601][ T6980] veth0_vlan: entered promiscuous mode [ 567.799615][ T6980] veth1_vlan: entered promiscuous mode [ 568.255995][ T7003] veth0_vlan: entered promiscuous mode [ 568.329343][ T6980] veth0_macvtap: entered promiscuous mode [ 568.445444][ T6980] veth1_macvtap: entered promiscuous mode [ 568.685684][ T7003] veth1_vlan: entered promiscuous mode [ 568.810179][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.073199][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.326643][ T6980] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.336672][ T6980] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.346203][ T6980] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.355500][ T6980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.402261][ T7003] veth0_macvtap: entered promiscuous mode [ 569.490548][ T7003] veth1_macvtap: entered promiscuous mode [ 569.796950][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.919121][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.062144][ T7003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.071459][ T7003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.080853][ T7003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.090165][ T7003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.073570][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.084213][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.095234][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.127588][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.171195][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.315451][ T49] Bluetooth: hci3: command tx timeout [ 573.939292][ T7184] chnl_net:caif_netlink_parms(): no params data found [ 574.185808][ T1879] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.343440][ T7216] loop2: detected capacity change from 0 to 512 [ 574.368108][ T7216] EXT4-fs: Ignoring removed nobh option [ 574.422300][ T1879] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.541734][ T7216] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 574.553955][ T7216] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 574.564750][ T7216] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.237: Corrupt directory, running e2fsck is recommended [ 574.615071][ T7216] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 574.624185][ T7216] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.237: corrupted in-inode xattr: invalid ea_ino [ 574.661139][ T7216] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.237: couldn't read orphan inode 15 (err -117) [ 574.693905][ T7216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.756181][ T1879] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.804423][ T7216] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 574.816934][ T7216] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 574.827745][ T7216] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.237: Corrupt directory, running e2fsck is recommended [ 574.878422][ T7216] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.237: path /78/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 574.985848][ T1879] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.021465][ T7216] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 8: comm syz.2.237: path /78/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 575.394163][ T49] Bluetooth: hci3: command tx timeout [ 575.510870][ T1879] bridge_slave_1: left allmulticast mode [ 575.516924][ T1879] bridge_slave_1: left promiscuous mode [ 575.527172][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.633302][ T1879] bridge_slave_0: left allmulticast mode [ 575.639348][ T1879] bridge_slave_0: left promiscuous mode [ 575.646888][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.713019][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.427275][ T1879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.544357][ T1879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.618302][ T1879] bond0 (unregistering): Released all slaves [ 577.270872][ T1879] hsr_slave_0: left promiscuous mode [ 577.382336][ T1879] hsr_slave_1: left promiscuous mode [ 577.391617][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.399774][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.493858][ T5803] Bluetooth: hci3: command tx timeout [ 577.691834][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.699971][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.149381][ T1879] veth1_macvtap: left promiscuous mode [ 578.155452][ T1879] veth0_macvtap: left promiscuous mode [ 578.161849][ T1879] veth1_vlan: left promiscuous mode [ 578.167494][ T1879] veth0_vlan: left promiscuous mode [ 580.036937][ T5803] Bluetooth: hci3: command tx timeout [ 581.792541][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.805498][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.827140][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.850832][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.879381][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.402045][ T1879] team0 (unregistering): Port device team_slave_1 removed [ 582.486174][ T1879] team0 (unregistering): Port device team_slave_0 removed [ 583.775279][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.783391][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.791674][ T7184] bridge_slave_0: entered allmulticast mode [ 583.801935][ T7184] bridge_slave_0: entered promiscuous mode [ 584.039488][ C1] hrtimer: interrupt took 313697 ns [ 584.048032][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.056418][ T49] Bluetooth: hci1: command tx timeout [ 584.056821][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.075838][ T7184] bridge_slave_1: entered allmulticast mode [ 584.086755][ T7184] bridge_slave_1: entered promiscuous mode [ 584.649808][ T7184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.799387][ T7184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.447408][ T7184] team0: Port device team_slave_0 added [ 585.638772][ T7184] team0: Port device team_slave_1 added [ 585.925745][ T1879] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.110750][ T5803] Bluetooth: hci1: command tx timeout [ 586.152482][ T7278] loop2: detected capacity change from 0 to 4096 [ 586.342293][ T1879] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.470311][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.477610][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.504522][ T7184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.628310][ T7243] chnl_net:caif_netlink_parms(): no params data found [ 586.733248][ T1879] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.812167][ T7278] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 586.850821][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.858260][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.885281][ T7184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.960023][ T1879] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.080705][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.088860][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.417532][ T4054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.425976][ T4054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.932606][ T7184] hsr_slave_0: entered promiscuous mode [ 587.946769][ T7184] hsr_slave_1: entered promiscuous mode [ 587.956478][ T7184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.964534][ T7184] Cannot create hsr debugfs directory [ 588.240096][ T5803] Bluetooth: hci1: command tx timeout [ 588.553557][ T1879] bridge_slave_1: left allmulticast mode [ 588.560343][ T1879] bridge_slave_1: left promiscuous mode [ 588.567099][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.628839][ T1879] bridge_slave_0: left allmulticast mode [ 588.635218][ T1879] bridge_slave_0: left promiscuous mode [ 588.642604][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.412885][ T1879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.465030][ T1879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.506093][ T1879] bond0 (unregistering): Released all slaves [ 589.565419][ T7306] syz_tun: entered allmulticast mode [ 589.908110][ T1879] hsr_slave_0: left promiscuous mode [ 589.960504][ T1879] hsr_slave_1: left promiscuous mode [ 589.969185][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.978485][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.097464][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.112788][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.263998][ T1879] veth1_macvtap: left promiscuous mode [ 590.270585][ T1879] veth0_macvtap: left promiscuous mode [ 590.276661][ T1879] veth1_vlan: left promiscuous mode [ 590.280199][ T49] Bluetooth: hci1: command tx timeout [ 590.282558][ T1879] veth0_vlan: left promiscuous mode [ 590.710431][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 591.397465][ T1879] team0 (unregistering): Port device team_slave_1 removed [ 591.484848][ T1879] team0 (unregistering): Port device team_slave_0 removed [ 593.635059][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.643182][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.651508][ T7243] bridge_slave_0: entered allmulticast mode [ 593.661823][ T7243] bridge_slave_0: entered promiscuous mode [ 593.847130][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.858239][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.866386][ T7243] bridge_slave_1: entered allmulticast mode [ 593.877244][ T7243] bridge_slave_1: entered promiscuous mode [ 594.461312][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.585701][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.774716][ T7243] team0: Port device team_slave_0 added [ 595.798772][ T7243] team0: Port device team_slave_1 added [ 596.977077][ T7184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 597.006386][ T7184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 597.179277][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.188547][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.215692][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.307596][ T7184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 597.507379][ T7184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 597.748008][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.755639][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.782528][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.371118][ T7366] syz.2.264 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 599.145742][ T7243] hsr_slave_0: entered promiscuous mode [ 599.158272][ T7243] hsr_slave_1: entered promiscuous mode [ 599.293802][ T7359] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 599.503822][ T7359] usb 3-1: Using ep0 maxpacket: 8 [ 599.589358][ T7359] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 599.600077][ T7359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.608434][ T7359] usb 3-1: Product: syz [ 599.613256][ T7359] usb 3-1: Manufacturer: syz [ 599.618138][ T7359] usb 3-1: SerialNumber: syz [ 599.771625][ T7359] usb 3-1: config 0 descriptor?? [ 599.894449][ T7359] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 600.996524][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 601.003640][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.125233][ T7359] gspca_sonixj: reg_w1 err -110 [ 601.131578][ T7359] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 601.305606][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.738868][ T7184] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.335270][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.343109][ T3711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.535878][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.543688][ T3711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.144595][ T5877] usb 3-1: USB disconnect, device number 2 [ 604.236850][ T7243] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.488555][ T7243] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.740328][ T7243] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 604.893275][ T7243] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 607.131158][ T7413] loop4: detected capacity change from 0 to 128 [ 608.256526][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.699257][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.896741][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.904643][ T4054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.172209][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.180041][ T4054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.689071][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.929963][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 612.141005][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 612.203915][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 612.213781][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.222372][ T24] usb 3-1: Product: syz [ 612.226821][ T24] usb 3-1: Manufacturer: syz [ 612.231819][ T24] usb 3-1: SerialNumber: syz [ 612.384577][ T24] usb 3-1: config 0 descriptor?? [ 612.461465][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 614.144129][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.409769][ T24] gspca_sonixj: reg_w1 err -71 [ 616.450679][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 616.622790][ T24] usb 3-1: USB disconnect, device number 3 [ 617.172766][ T7184] veth0_vlan: entered promiscuous mode [ 617.232368][ T7184] veth1_vlan: entered promiscuous mode [ 617.288290][ T7461] netlink: 128 bytes leftover after parsing attributes in process `syz.7.281'. [ 617.788573][ T7184] veth0_macvtap: entered promiscuous mode [ 617.925805][ T7184] veth1_macvtap: entered promiscuous mode [ 618.399004][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.513485][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.733282][ T7184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.743345][ T7184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.752850][ T7184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.762111][ T7184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.801075][ T7494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 620.808312][ T7494] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 620.850615][ T7495] netlink: 'syz.2.287': attribute type 10 has an invalid length. [ 620.978975][ T7494] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 620.987015][ T7494] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 620.994736][ T7494] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 621.046285][ T7495] bridge0: port 1(netdevsim0) entered blocking state [ 621.053692][ T7495] bridge0: port 1(netdevsim0) entered disabled state [ 621.061358][ T7495] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 621.073465][ T7495] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 621.094688][ T7494] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 621.147732][ T7494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 621.157550][ T7494] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 621.220238][ T7494] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 621.415105][ T7494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 621.422400][ T7494] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 621.500818][ T7494] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 622.271652][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 622.459881][ T7346] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 623.154203][ T5803] Bluetooth: hci6: command 0x0c1a tx timeout [ 623.154747][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 623.231588][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 623.470751][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 624.380328][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 625.168481][ T7243] veth0_vlan: entered promiscuous mode [ 625.435997][ T5803] Bluetooth: hci6: command 0x0c1a tx timeout [ 625.461411][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.724077][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.659223][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout [ 627.666871][ T5809] Bluetooth: hci6: command 0x0c1a tx timeout [ 627.768505][ T7243] veth1_vlan: entered promiscuous mode [ 627.793541][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.870878][ T7346] usb 3-1: device descriptor read/all, error -110 [ 628.071697][ T7346] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 628.102102][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.290'. [ 628.300918][ T7346] usb 3-1: device descriptor read/64, error -32 [ 628.417767][ T7346] usb usb3-port1: attempt power cycle [ 628.446346][ T7243] veth0_macvtap: entered promiscuous mode [ 628.540906][ T7359] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 628.593664][ T7243] veth1_macvtap: entered promiscuous mode [ 628.771083][ T7359] usb 8-1: Using ep0 maxpacket: 8 [ 628.850115][ T7346] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 628.900871][ T7359] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 628.910642][ T7359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.924227][ T7359] usb 8-1: Product: syz [ 628.928066][ T7346] usb 3-1: device descriptor read/8, error -32 [ 628.928615][ T7359] usb 8-1: Manufacturer: syz [ 628.942718][ T7359] usb 8-1: SerialNumber: syz [ 629.026633][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.145289][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.213623][ T7359] usb 8-1: config 0 descriptor?? [ 629.218969][ T7346] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 629.290260][ T7346] usb 3-1: device descriptor read/8, error -32 [ 629.310666][ T7359] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 629.377490][ T7243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.386957][ T7243] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.396589][ T7243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.406050][ T7243] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.454316][ T7346] usb usb3-port1: unable to enumerate USB device [ 630.194855][ T7521] netlink: 128 bytes leftover after parsing attributes in process `syz.4.292'. [ 632.163674][ T7359] gspca_sonixj: reg_w1 err -71 [ 632.222457][ T7359] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 632.320145][ T7359] usb 8-1: USB disconnect, device number 2 [ 632.368395][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.390721][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.411629][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.435168][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.448175][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.707017][ T7537] loop4: detected capacity change from 0 to 2048 [ 634.236323][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.538085][ T7537] EXT4-fs (loop4): shut down requested (0) [ 634.575060][ T7554] EXT4-fs (loop4): shut down requested (0) [ 634.591198][ T5809] Bluetooth: hci0: command tx timeout [ 635.125491][ T4054] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.240865][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 635.362388][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.406020][ T4054] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.701707][ T4054] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.265806][ T4054] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.704212][ T5809] Bluetooth: hci0: command tx timeout [ 638.760628][ T5809] Bluetooth: hci0: command tx timeout [ 640.114270][ T4054] bridge_slave_1: left allmulticast mode [ 640.122689][ T4054] bridge_slave_1: left promiscuous mode [ 640.129668][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.311456][ T4054] bridge_slave_0: left allmulticast mode [ 640.317493][ T4054] bridge_slave_0: left promiscuous mode [ 640.324677][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.622158][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.631855][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.643348][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.856949][ T5803] Bluetooth: hci0: command tx timeout [ 640.863643][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.951561][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 641.663977][ T7584] netlink: 128 bytes leftover after parsing attributes in process `syz.4.301'. [ 642.077422][ T4054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.397792][ T4054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.444543][ T7589] loop7: detected capacity change from 0 to 8 [ 643.210942][ T5803] Bluetooth: hci3: command tx timeout [ 643.267323][ T4054] bond0 (unregistering): Released all slaves [ 643.920394][ T7588] SQUASHFS error: Failed to read block 0x260685: -5 [ 643.927569][ T7588] SQUASHFS error: Unable to read metadata cache entry [260685] [ 643.935870][ T7588] SQUASHFS error: Unable to read directory block [260685:0] [ 643.946893][ T4054] hsr_slave_0: left promiscuous mode [ 644.039902][ T4054] hsr_slave_1: left promiscuous mode [ 644.048664][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.056937][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.131465][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 644.161976][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 644.180016][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 644.194316][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 644.210542][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 644.306672][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.314890][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.402150][ T4054] veth1_macvtap: left promiscuous mode [ 644.408084][ T4054] veth0_macvtap: left promiscuous mode [ 644.414601][ T4054] veth1_vlan: left promiscuous mode [ 644.420529][ T4054] veth0_vlan: left promiscuous mode [ 644.550205][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 645.099781][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 645.291031][ T5803] Bluetooth: hci3: command tx timeout [ 645.319094][ T11] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 645.328890][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.337685][ T11] usb 5-1: Product: syz [ 645.342282][ T11] usb 5-1: Manufacturer: syz [ 645.347157][ T11] usb 5-1: SerialNumber: syz [ 645.373381][ T11] usb 5-1: config 0 descriptor?? [ 645.392026][ T11] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 646.380685][ T5803] Bluetooth: hci5: command tx timeout [ 646.536402][ T4054] team0 (unregistering): Port device team_slave_1 removed [ 646.584919][ T4054] team0 (unregistering): Port device team_slave_0 removed [ 647.360809][ T5803] Bluetooth: hci3: command tx timeout [ 647.478535][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.487612][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.496622][ T7532] bridge_slave_0: entered allmulticast mode [ 647.509716][ T7532] bridge_slave_0: entered promiscuous mode [ 647.693243][ T7607] loop7: detected capacity change from 0 to 128 [ 647.743593][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.751997][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.769085][ T7532] bridge_slave_1: entered allmulticast mode [ 647.781977][ T7532] bridge_slave_1: entered promiscuous mode [ 648.319840][ T7607] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 648.356690][ T7607] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 648.409669][ T11] gspca_sonixj: reg_w1 err -71 [ 648.525395][ T11] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 648.573812][ T5803] Bluetooth: hci5: command tx timeout [ 649.052710][ T11] usb 5-1: USB disconnect, device number 3 [ 649.327085][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.067498][ T5803] Bluetooth: hci3: command tx timeout [ 650.870001][ T5803] Bluetooth: hci5: command tx timeout [ 650.957336][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.046294][ T7003] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.177837][ T4279] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.715503][ T4279] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.830339][ T7493] syz_tun (unregistering): left allmulticast mode [ 651.979105][ T7493] raw-gadget.0 gadget.2: failed to queue disconnect event [ 652.246390][ T4279] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.328228][ T7532] team0: Port device team_slave_0 added [ 652.436762][ T4279] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.524610][ T7532] team0: Port device team_slave_1 added [ 652.920578][ T5803] Bluetooth: hci5: command tx timeout [ 652.953439][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.961043][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.994951][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.241470][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 653.332706][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.340355][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.367003][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.407759][ T4279] bridge_slave_1: left allmulticast mode [ 653.414275][ T4279] bridge_slave_1: left promiscuous mode [ 653.421563][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.514473][ T4279] bridge_slave_0: left allmulticast mode [ 653.520756][ T4279] bridge_slave_0: left promiscuous mode [ 653.527548][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.247964][ T7642] loop4: detected capacity change from 0 to 512 [ 654.533638][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.547212][ T7642] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.571628][ T4279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.672137][ T4279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.758082][ T4279] bond0 (unregistering): Released all slaves [ 654.850931][ T7595] chnl_net:caif_netlink_parms(): no params data found [ 655.064275][ T7655] syz.7.314: attempt to access beyond end of device [ 655.064275][ T7655] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 655.077703][ T7655] efs: cannot read volume header [ 656.041687][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.243602][ T4279] hsr_slave_0: left promiscuous mode [ 657.259719][ T4279] hsr_slave_1: left promiscuous mode [ 657.332221][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.340638][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.379304][ T4279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.387528][ T4279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.530666][ T4279] veth1_macvtap: left promiscuous mode [ 657.536575][ T4279] veth0_macvtap: left promiscuous mode [ 657.542851][ T4279] veth1_vlan: left promiscuous mode [ 657.548533][ T4279] veth0_vlan: left promiscuous mode [ 657.749845][ T7359] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 657.827322][ T7665] loop7: detected capacity change from 0 to 1024 [ 657.990431][ T7359] usb 5-1: Using ep0 maxpacket: 8 [ 658.056002][ T7359] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 658.065859][ T7359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.075154][ T7359] usb 5-1: Product: syz [ 658.079761][ T7359] usb 5-1: Manufacturer: syz [ 658.084630][ T7359] usb 5-1: SerialNumber: syz [ 658.339899][ T7359] usb 5-1: config 0 descriptor?? [ 658.370135][ T7359] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 658.960205][ T4279] team0 (unregistering): Port device team_slave_1 removed [ 659.057681][ T4279] team0 (unregistering): Port device team_slave_0 removed [ 659.763441][ T7532] hsr_slave_0: entered promiscuous mode [ 659.777352][ T7532] hsr_slave_1: entered promiscuous mode [ 661.463244][ T7359] gspca_sonixj: reg_w1 err -71 [ 661.551493][ T7359] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 661.773665][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 661.780809][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.810044][ T7359] usb 5-1: USB disconnect, device number 4 [ 662.055101][ T4279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.519132][ T4279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.130769][ T4279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.574012][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.582344][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.590694][ T7576] bridge_slave_0: entered allmulticast mode [ 663.601215][ T7576] bridge_slave_0: entered promiscuous mode [ 663.637113][ T4279] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 663.646335][ T4279] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 663.655533][ T4279] bridge0: port 1(netdevsim0) entered disabled state [ 663.781092][ T4279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.716879][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.725248][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.733832][ T7576] bridge_slave_1: entered allmulticast mode [ 664.744204][ T7576] bridge_slave_1: entered promiscuous mode [ 665.002314][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.010318][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.018335][ T7595] bridge_slave_0: entered allmulticast mode [ 665.030586][ T7595] bridge_slave_0: entered promiscuous mode [ 665.178143][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.188931][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.197558][ T7595] bridge_slave_1: entered allmulticast mode [ 665.207769][ T7595] bridge_slave_1: entered promiscuous mode [ 665.324176][ T7701] loop4: detected capacity change from 0 to 1024 [ 665.701424][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.087034][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.113882][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.096955][ T4279] bond0 (unregistering): Released all slaves [ 667.114418][ T7713] loop7: detected capacity change from 0 to 1764 [ 667.180605][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 667.230374][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.410470][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 667.463205][ T42] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 667.473024][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.485114][ T42] usb 5-1: Product: syz [ 667.489842][ T42] usb 5-1: Manufacturer: syz [ 667.494726][ T42] usb 5-1: SerialNumber: syz [ 667.518170][ T42] usb 5-1: config 0 descriptor?? [ 667.628835][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 667.889569][ T7576] team0: Port device team_slave_0 added [ 667.999706][ T7576] team0: Port device team_slave_1 added [ 668.032376][ T7595] team0: Port device team_slave_0 added [ 668.318317][ T7595] team0: Port device team_slave_1 added [ 668.355771][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.364236][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.391505][ T7576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.496809][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.504551][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.531891][ T7576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.680309][ T7532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 669.729920][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.737355][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.764480][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.933102][ T4279] hsr_slave_0: left promiscuous mode [ 669.970073][ T4279] hsr_slave_1: left promiscuous mode [ 670.045536][ T4279] veth1_macvtap: left promiscuous mode [ 670.052001][ T4279] veth0_macvtap: left promiscuous mode [ 670.058236][ T4279] veth1_vlan: left promiscuous mode [ 670.064343][ T4279] veth0_vlan: left promiscuous mode [ 670.550475][ T42] gspca_sonixj: reg_w1 err -71 [ 670.593372][ T42] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 670.620308][ T42] usb 5-1: USB disconnect, device number 5 [ 670.645324][ T7062] udevd[7062]: setting mode of /dev/bus/usb/005/005 to 020664 failed: No such file or directory [ 670.675116][ T7062] udevd[7062]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 671.501330][ T7532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 671.764443][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.772123][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.799997][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.836592][ T7532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 671.936432][ T7732] loop4: detected capacity change from 0 to 1024 [ 672.056869][ T7532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 672.165656][ T7576] hsr_slave_0: entered promiscuous mode [ 672.177686][ T7576] hsr_slave_1: entered promiscuous mode [ 672.187328][ T7576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.195412][ T7576] Cannot create hsr debugfs directory [ 672.916632][ T7595] hsr_slave_0: entered promiscuous mode [ 672.927659][ T7595] hsr_slave_1: entered promiscuous mode [ 672.937067][ T7595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.945033][ T7595] Cannot create hsr debugfs directory [ 673.594202][ T7746] loop4: detected capacity change from 0 to 512 [ 673.724975][ T7746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 673.738769][ T7746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 674.018726][ T7746] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 674.035273][ T7746] EXT4-fs (loop4): 1 truncate cleaned up [ 674.045121][ T7746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.496860][ T5812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.736522][ T7576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 675.840607][ T7576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 676.071901][ T7576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 676.366747][ T7576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 676.564331][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.338717][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.377268][ T7595] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 677.541729][ T7595] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 677.646613][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.654671][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.714818][ T7595] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 677.917623][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.926380][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.034909][ T7595] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 679.545393][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.936860][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.071076][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.078906][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.251660][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.259712][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.670348][ T7346] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 680.901951][ T7346] usb 5-1: Using ep0 maxpacket: 8 [ 681.016948][ T7346] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 681.027231][ T7346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.035978][ T7346] usb 5-1: Product: syz [ 681.040733][ T7346] usb 5-1: Manufacturer: syz [ 681.045673][ T7346] usb 5-1: SerialNumber: syz [ 681.079363][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.204404][ T7346] usb 5-1: config 0 descriptor?? [ 681.314817][ T7595] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.342193][ T7346] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 681.529191][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.537034][ T3950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.721796][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.729807][ T3950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.546204][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.145347][ T7346] gspca_sonixj: reg_r err -32 [ 683.192322][ T7346] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 683.886887][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.521750][ T5863] usb 5-1: USB disconnect, device number 6 [ 684.652398][ T7801] loop7: detected capacity change from 0 to 1024 [ 685.051927][ T7808] ===================================================== [ 685.059989][ T7808] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x99f/0x25e0 [ 685.067511][ T7808] hfsplus_uni2asc+0x99f/0x25e0 [ 685.075129][ T7808] hfsplus_readdir+0xd60/0x1a70 [ 685.080703][ T7808] iterate_dir+0x716/0x920 [ 685.085519][ T7808] __se_sys_getdents+0x182/0x550 [ 685.090951][ T7808] __x64_sys_getdents+0x97/0xe0 [ 685.096103][ T7808] x64_sys_call+0x3233/0x3db0 [ 685.101540][ T7808] do_syscall_64+0xd9/0x210 [ 685.106995][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.113564][ T7808] [ 685.116049][ T7808] Uninit was created at: [ 685.120916][ T7808] __kmalloc_noprof+0x95f/0x1310 [ 685.126095][ T7808] hfsplus_find_init+0x90/0x1d0 [ 685.131557][ T7808] hfsplus_readdir+0x1dc/0x1a70 [ 685.136692][ T7808] iterate_dir+0x716/0x920 [ 685.141588][ T7808] __se_sys_getdents+0x182/0x550 [ 685.146839][ T7808] __x64_sys_getdents+0x97/0xe0 [ 685.153729][ T7808] x64_sys_call+0x3233/0x3db0 [ 685.158732][ T7808] do_syscall_64+0xd9/0x210 [ 685.163929][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.170385][ T7808] [ 685.172917][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.7.343 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(undef) [ 685.185450][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.196180][ T7808] ===================================================== [ 685.203619][ T7808] Disabling lock debugging due to kernel taint [ 685.210266][ T7808] Kernel panic - not syncing: kmsan.panic set ... [ 685.216993][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.7.343 Tainted: G B 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(undef) [ 685.230901][ T7808] Tainted: [B]=BAD_PAGE [ 685.235230][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.245533][ T7808] Call Trace: [ 685.249000][ T7808] [ 685.252096][ T7808] __dump_stack+0x26/0x30 [ 685.256731][ T7808] dump_stack_lvl+0x53/0x270 [ 685.261628][ T7808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 685.267751][ T7808] dump_stack+0x1e/0x25 [ 685.272174][ T7808] panic+0x4bd/0xd50 [ 685.276409][ T7808] kmsan_report+0x31c/0x320 [ 685.281229][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.286617][ T7808] ? __msan_warning+0x1b/0x30 [ 685.291561][ T7808] ? hfsplus_uni2asc+0x99f/0x25e0 [ 685.296830][ T7808] ? hfsplus_readdir+0xd60/0x1a70 [ 685.302134][ T7808] ? iterate_dir+0x716/0x920 [ 685.307026][ T7808] ? __se_sys_getdents+0x182/0x550 [ 685.312430][ T7808] ? __x64_sys_getdents+0x97/0xe0 [ 685.317732][ T7808] ? x64_sys_call+0x3233/0x3db0 [ 685.322918][ T7808] ? do_syscall_64+0xd9/0x210 [ 685.327859][ T7808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.334193][ T7808] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 685.340735][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.346251][ T7808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 685.352399][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.357810][ T7808] ? hfsplus_brec_keylen+0x2f7/0x5a0 [ 685.363420][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.368856][ T7808] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 685.375397][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.380792][ T7808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 685.386965][ T7808] ? utf32_to_utf8+0x3e4/0x410 [ 685.392113][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.397514][ T7808] __msan_warning+0x1b/0x30 [ 685.402255][ T7808] hfsplus_uni2asc+0x99f/0x25e0 [ 685.407411][ T7808] hfsplus_readdir+0xd60/0x1a70 [ 685.412602][ T7808] ? aa_file_perm+0x378/0x18d0 [ 685.417749][ T7808] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 685.424372][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.429753][ T7808] ? kmsan_get_metadata+0xfb/0x160 [ 685.435212][ T7808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 685.441368][ T7808] ? __pfx_hfsplus_readdir+0x10/0x10 [ 685.446932][ T7808] iterate_dir+0x716/0x920 [ 685.451627][ T7808] __se_sys_getdents+0x182/0x550 [ 685.456820][ T7808] ? __pfx_filldir+0x10/0x10 [ 685.462003][ T7808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 685.468126][ T7808] __x64_sys_getdents+0x97/0xe0 [ 685.473275][ T7808] x64_sys_call+0x3233/0x3db0 [ 685.478234][ T7808] do_syscall_64+0xd9/0x210 [ 685.482974][ T7808] ? irqentry_exit+0x16/0x60 [ 685.487805][ T7808] ? clear_bhb_loop+0x40/0x90 [ 685.492788][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.498941][ T7808] RIP: 0033:0x7fe5efb8e929 [ 685.503544][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.523433][ T7808] RSP: 002b:00007fe5f09be038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 685.532131][ T7808] RAX: ffffffffffffffda RBX: 00007fe5efdb6080 RCX: 00007fe5efb8e929 [ 685.540430][ T7808] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 685.548603][ T7808] RBP: 00007fe5efc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 685.556767][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.564957][ T7808] R13: 0000000000000000 R14: 00007fe5efdb6080 R15: 00007ffef80eca68 [ 685.573204][ T7808] [ 685.576993][ T7808] Kernel Offset: disabled [ 685.581436][ T7808] Rebooting in 86400 seconds..